New!Websites for Authors
Tertulia Logo
New!Websites for Authors
The co-op bookstore for avid readers
Book Cover for: Advanced Windows Memory Dump Analysis with Data Structures: Training Course Transcript and Windbg Practice Exercises with Notes, Second Edition, Dmitry Vostokov

Advanced Windows Memory Dump Analysis with Data Structures: Training Course Transcript and Windbg Practice Exercises with Notes, Second Edition

Dmitry Vostokov

Paperback
Out of stock

Do you recommend this book?

Yes!

No

The full transcript of Memory Dump Analysis Services Training with 10 step-by-step exercises, notes, and selected questions and answers. Learn how to navigate through memory dump space and Windows data structures to troubleshoot and debug complex software incidents. The training uses a unique and innovative pattern-driven analysis approach to speed up the learning curve. It consists of practical step-by-step exercises using WinDbg to diagnose structural and behavioural patterns in 64-bit kernel and complete (physical) memory dumps. Additional topics include memory search, kernel linked list navigation, practical WinDbg scripting, registry, system variables and objects, device drivers and I/O. Prerequisites are basic and intermediate level Windows memory dump analysis: ability to list processors, processes, threads, modules, apply symbols, walk through stack traces and raw stack data, diagnose patterns such as heap corruption, CPU spike, memory and handle leaks, access violation, stack overflow, critical section and resource wait chains and deadlocks. If you don't feel comfortable with prerequisites then Accelerated Windows Memory Dump Analysis training book is recommended before purchasing and reading this book course. Audience: Software developers, software technical support and escalation engineers, reverse and security research engineers. The 2nd edition contains updated exercises for the latest WinDbg version from Windows SDK 8.1.

Book Details

  • Publisher: Opentask
  • Publish Date: Dec 13rd, 2013
  • Pages: 198
  • Language: English
  • Edition: undefined - 0002
  • Dimensions: 11.00in - 8.50in - 0.51in - 1.04lb
  • EAN: 9780955832888
  • Categories: • Operating Systems - Windows Server• Languages - Assembly Language• Security - Viruses & Malware

More books to explore

Book Cover for: The Art of Mac Malware, Volume 1: The Guide to Analyzing Malicious Software, Patrick Wardle
Book Cover for: The Werewolf at Dusk: And Other Stories, David Small

More books by Dmitry Vostokov

Book Cover for: Visual Category Theory Brick by Brick: Diagrammatic LEGO(R) Reference, Dmitry Vostokov
Book Cover for: Python Debugging for Ai, Machine Learning, and Cloud Computing: A Pattern-Oriented Approach, Dmitry Vostokov
Book Cover for: Accelerated macOS Core Dump Analysis, Third Edition: Training Course Transcript with LLDB Practice Exercises, Dmitry Vostokov
Book Cover for: Accelerated Windows Memory Dump Analysis, Sixth Edition, Part 1, Process User Space: Training Course Transcript and WinDbg Practice Exercises with Not, Dmitry Vostokov
Book Cover for: Accelerated Windows Memory Dump Analysis, Sixth Edition, Part 2, Kernel and Complete Spaces: Training Course Transcript and WinDbg Practice Exercises, Dmitry Vostokov
Book Cover for: Foundations of Linux Debugging, Disassembling, and Reversing: Analyze Binary Code, Understand Stack Memory Usage, and Reconstruct C/C++ Code with Inte, Dmitry Vostokov
Book Cover for: Pattern-Oriented Memory Forensics: A Pattern Language Approach, Revised Edition, Dmitry Vostokov
Book Cover for: Visual Category Theory, CoPart 1: A Dual to Brick by Brick, Part 1, Dmitry Vostokov
Book Cover for: Foundations of Arm64 Linux Debugging, Disassembling, and Reversing: Analyze Code, Understand Stack Memory Usage, and Reconstruct Original C/C++ Code w, Dmitry Vostokov
Book Cover for: Accelerated Linux Core Dump Analysis: Training Course Transcript with GDB and WinDbg Practice Exercises, Fourth Edition, Software Diagnostics Services
Book Cover for: Accelerated Linux API for Software Diagnostics: With Category Theory in View, Dmitry Vostokov
Book Cover for: Fundamentals of Physical Memory Analysis: Anniversary Edition, Dmitry Vostokov
Book Cover for: Debugging.TV Frames: 10-Year Anniversary Edition of Slides, Dmitry Vostokov
Book Cover for: Accelerated .NET Memory Dump Analysis: Training Course Transcript with WinDbg and LLDB Practice Exercises, Seventh Edition, Dmitry Vostokov
Book Cover for: Accelerated Windows API for Software Diagnostics: With Category Theory in View, Second Edition, Dmitry Vostokov
Book Cover for: Accelerated Windows Malware Analysis with Memory Dumps: Training Course Transcript and WinDbg Practice Exercises, Third Edition, Dmitry Vostokov